Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa
File:                     50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa (raw, json)
Hash identifier:          qKLesJjR+QYJCQ9oZroGu0tc52ZdD/Z64YgOi5gxCMM=
Subject key identifier:   78:3D:E2:BA:27:F9:77:A1:81:71:CF:57:90:5D:AE:8F:9C:BE:28:14
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584AB650E648C84A242E2801DD00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     30967
IP address blocks:        205.252.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e6:48:c8:4a:24:2e:28:01:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=9b8bfba8-fb12-4682-ac20-23bfe50de6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:3a:12:52:2b:49:91:f0:3a:cb:91:78:37:
                    fb:d5:77:cd:1e:16:0e:40:e6:cd:a7:da:b8:a7:32:
                    34:96:55:62:9b:bc:de:8e:ab:29:de:2b:47:f9:7a:
                    3d:df:e6:ee:7e:f6:5c:0f:99:88:1d:80:c7:1c:e7:
                    f7:0a:30:8c:55:55:4a:6c:3f:fb:4c:28:4d:18:77:
                    87:13:a4:59:74:c6:56:fa:06:aa:c6:97:13:15:f8:
                    b9:01:36:6b:6d:1a:7c:99:39:e9:24:a8:43:4d:4e:
                    0d:1d:a0:f2:30:38:30:fd:bf:4f:b4:cc:fa:30:23:
                    cb:e5:43:29:0f:10:c4:58:1e:d1:97:e4:38:0f:80:
                    dc:92:4f:81:e2:bc:f2:27:0f:9b:f0:ae:28:bf:73:
                    7e:e0:a0:3f:7f:93:17:fa:f3:55:d6:ab:62:f2:44:
                    72:60:74:75:03:e9:d6:99:f6:da:bb:33:1e:de:c0:
                    a5:57:1d:9b:fa:9c:d5:e7:1e:00:da:e3:98:f6:47:
                    1f:a4:b5:b2:89:dd:d5:34:55:c2:41:a7:94:de:07:
                    76:49:d8:ba:82:e7:7b:fd:83:fe:dd:04:8a:08:91:
                    ef:19:76:4b:ff:9a:4b:c6:f1:81:8b:c7:ea:e1:53:
                    8c:65:9b:d0:63:4b:ee:bc:78:6e:16:11:68:15:07:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3D:E2:BA:27:F9:77:A1:81:71:CF:57:90:5D:AE:8F:9C:BE:28:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.252.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:6c:b2:33:9a:ec:8a:e0:29:7a:26:51:7d:5a:eb:20:72:
         88:bc:03:e2:fb:12:71:a8:85:58:24:41:cc:21:dc:5a:c3:42:
         cc:7c:e6:3d:7e:8a:20:70:29:06:ab:06:c5:92:70:86:c8:76:
         6b:6e:33:3c:75:44:92:59:43:7f:b9:96:4e:17:11:a2:66:b4:
         f6:0d:df:8c:d2:ac:e5:32:c6:12:2d:d0:da:71:22:67:98:3e:
         6c:67:ce:e9:4b:10:4f:c3:0e:67:31:4b:40:c2:83:86:03:62:
         91:59:42:75:a4:65:37:9e:06:18:28:88:a7:9f:06:fb:f3:58:
         8b:7b:26:ea:19:46:ab:d4:23:c7:2c:18:a6:8f:21:c9:91:b2:
         96:e5:31:51:dd:d1:bc:6e:57:24:a2:ec:18:cb:e2:fa:68:f0:
         ea:a8:21:d6:a4:ab:05:ed:86:ca:24:45:60:41:39:b1:77:72:
         fe:fb:eb:e0:2a:26:e8:ea:76:c2:39:07:2e:ac:12:59:2d:99:
         b3:e9:ac:2b:bb:3b:9a:c4:41:56:d9:94:2b:66:4e:44:39:68:
         5b:02:da:1c:3a:f7:38:82:52:53:ce:8b:df:2b:4f:a7:6a:80:
         0d:40:4b:2e:fe:32:0a:fb:df:16:8b:c4:ab:d8:a6:f0:46:f2:
         72:f8:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:27:28 2025 by rpki-client